Hacks & Exploits
A record of crypto hacks, exploits and rug pulls — what was lost, how, and when.
1,192
Tracked incidents
$18.45B
Total lost (est.)
$1.48B
This year
249
Incidents this year
| Target | Technique | Chain | Date | Lost (est.) |
|---|---|---|---|---|
| Unistreets Access Control | Arbitrary External Call | Ethereum | 2026-08-05 | $17.75K |
| ShapeShift FOX Colony Access Control | Arbitrary External Call | Arbitrum | 2026-05-13 | $132.70K |
| Quant Access Control | Arbitrary External Call | Ethereum | 2026-04-28 | $138.00K |
| Custom sAVAX Rebalancer Access Control | Arbitrary External Call | Avalanche | 2026-04-19 | $64.00K |
| Benqi Staked Avax Access Control | Arbitrary External Call | Avalanche | 2026-04-19 | $64.00K |
| Fusion by IPOR Access Control | Arbitrary External Call | Arbitrum | 2026-01-06 | $336.00K |
| Hyperdrive HL Lending Access Control | Arbitrary External Call | Hyperliquid L1 | 2025-09-27 | $782.00K |
| 1inch Swap Access Control | Arbitrary External Call | Ethereum | 2025-03-07 | $5.00M |
| Aave Access Control | Arbitrary External Call | Ethereum | 2024-08-28 | $56.00K |
| Spectra Finance Access Control | Arbitrary External Call | Ethereum | 2024-07-24 | $73.00K |
| Dough Finance Access Control | Arbitrary External Call | Ethereum | 2024-07-12 | $1.96M |
| MixedSwapRouter Access Control | Arbitrary External Call | Arbitrum | 2024-05-31 | $16.00K |
| Rico Access Control | Arbitrary External Call | Arbitrum | 2024-04-20 | — |
| Chainge Finance Access Control | Arbitrary External Call | BSC | 2024-04-15 | $716.00K |
| Unizen Access Control | Arbitrary External Call | Ethereum | 2024-03-08 | $2.10M |
| Flooring Protocol Access Control | Arbitrary External Call | Ethereum | 2023-12-17 | $1.60M |
| Maestro Access Control | Arbitrary External Call | Ethereum | 2023-10-23 | $500.00K |
| Pond0x Access Control | Arbitrary External Call | Ethereum | 2023-07-28 | $2.20M |
| Revert Finance Access Control | Arbitrary External Call | Ethereum | 2023-02-20 | $29.00K |
| Hope Finance Access Control | Arbitrary External Call | Arbitrum | 2023-02-20 | $2.00M |
| Dexible V2 Access Control | Arbitrary External Call | Ethereum, Arbitrum | 2023-02-20 | $2.05M |
| CoWSwap Access Control | Arbitrary External Call | Ethereum | 2023-02-07 | $180.00K |
| RubicBRIDGE Access Control | Arbitrary External Call | Ethereum | 2022-12-25 | $1.41M |
| Brahma Finance Access Control | Arbitrary External Call | Ethereum | 2022-11-09 | $89.34K |
| BasketDAO Access Control | Arbitrary External Call | Ethereum | 2022-03-30 | $1.20M |
| Auctus Access Control | Arbitrary External Call | Ethereum | 2022-03-26 | $726.00K |
| Rari Capital Access Control | Arbitrary External Call | Ethereum | 2021-05-08 | $10.00M |
Filter technique:AllAPI Key CompromisedAccess Control ExploitAccounting ErrorAddress PoisoningAdmin DrainArbitrary External CallArithmetic ErrorBackdoor ContractBlind SigningBorrow Logic FlawBridge Logic FlawCDN Compromise
Loss amounts are estimates compiled by DefiLlama from public sources and may be revised. Not financial advice.
Data: DefiLlama · updated 2026-09-01 17:20 UTC. Not financial advice.